Script/Policy to Prevent Write to DVD/USB

[wmateo]

I have to prevent our MACS from writing to DVD drive or USB drive. Has anyone done this successfully in their environment? dont see much info about it other than changing the defaults for DVD write.

[calum_oac]

remove the physical connection to the drives and disable remove-able media?

[mikebetzel]

Yessir!

We use a Configuration Profile

Under Options - add a payload for restrictions and check the boxes for the restrictions you need under the Media tab.

We successfully disable external mass storage, write to disk, etc...

Edit/Addition: I should mention that I can disable write to CD/DVD and still allow read, I can't get that granular with mass storage, it is all or nothing. It essentially stops it from mounting the disk. I am looking into a product by lumens ion for getting more granular, I'll report back with my findings.

[wmateo]

@mikebetzel I will try this.... Thanks man!

[mikebetzel]

Glad to help!

[manjunath]

by adding payload for restrictions / media tab, successfully block usb storage but after this we cannot open any dmg files for installation

[mani2care]

do we have any extension attribute to know the USB blocked status